Systems and methods to detect fradulent transactions

Abstract

Systems and methods of the present disclosure are directed to detect fraudulent transactions. The method include detecting an online transaction initiated by a computing device. The method includes determining, identifying that the online transaction is in a state, a value corresponding to information of the computing device or a field of the online transaction. The method includes obtaining a look-up value corresponding to the value. The method includes selecting a routing policy based on comparing the value with the look-up value. The method includes determining to interrupt the online transaction based on detecting a presence of a match between at least one of the value and the look-up value. The method can include interrupting, responsive to the determination, the online transaction to direct the online transaction to a resolving state according to the routing policy.

What is claim is: 
     
         1 . A method of detecting fraudulent transactions, comprising:
 detecting, by a control system comprising a processor and memory, an online transaction initiated by a computing device;   determining, by the control system responsive to identifying that the online transaction is in a first state, a first value corresponding to information of the computing device;   obtaining, by the control system responsive to identifying that the online transaction is in the first state, a first look-up value corresponding to the first value;   selecting, by the control system, a first routing policy based on comparing the first value with the first look-up value;   determining, by the control system responsive to identifying that the online transaction is in a second state, a second value from a field of the online transaction;   obtaining, by the control system responsive to identifying that the online transaction is in the second state, a corresponding second look-up value corresponding to the second value;   selecting, by the control system, a second routing policy based on comparing the second value with the second look-up value;   determining, by the control system, to interrupt the online transaction based on detecting a presence of a match between at least one of the first value and the first look-up value or the second value and the second look-up value; and   interrupting, by the control system responsive to the determination, the online transaction to direct the online transaction to a resolving state according to either the first routing policy or the second routing policy.   
     
     
         2 . The method of  claim 1 , further comprising:
 intercepting, by the control system, network traffic originated from the computing device to identify the first value corresponding to the information of the computing device.   
     
     
         3 . The method of  claim 1 , wherein the information of the computing device comprises an IP address of the computing device that initiated the online transaction. 
     
     
         4 . The method of  claim 1 , further comprising:
 determining, by the control system, a geographic location of the computing device as the first value according to the information of the computing device;   obtaining, by the control system, a list of flagged geographic locations as the first look-up value;   determining the presence of the match between the first value and the first look-up value by identifying that the geographic location of the computing device is located in one of the flagged geographic locations; and   directing, by the control system according to the first routing policy, the online transaction to the resolving state including at least one of blocking the online transaction or initiating at least one further authentication process to be performed through the computing device.   
     
     
         5 . The method of  claim 1  further comprising:
 determining, by the control system according to the information of the computing device, a connection type through which the computing device initiated the online transaction as the first value; 
 obtaining, by the control system, a list of flagged connection types as of the first look-up value; 
 determining the presence of the match between the first value and the first look-up value by identifying that the connection type is among the list of flagged connection types; and 
 directing, by the control system according to the first routing policy, the online transaction to the resolving state including at least one of blocking the online transaction or initiating at least one further authentication process to be performed through the computing device. 
 
     
     
         6 . The method of  claim 1 , wherein the field of the online transaction comprises at least one of: a first name field, a last name field, an organization name field, a domain name field, and a phone number field. 
     
     
         7 . The method of  claim 1 , further comprising:
 obtaining, by the control system, responsive to identifying the second value corresponding to a value for at least one of a first name field or a last name field, a list of flagged first names or last names as the second look-up value;   determining the presence of the match between the second value and the second look-up value by identifying that the second value is one of the flagged first names or last names; and   directing, by the control system according to the second routing policy, the online transaction to the resolving state including at least one of blocking the online transaction or initiating at least one further authentication process to be performed through the computing device.   
     
     
         8 . The method of  claim 1 , further comprising:
 obtaining, by the control system, responsive to identifying the second value corresponding to a value for an organization name field, a list of flagged first names or last names as the second look-up value;   determining the presence of the match between the second value and the second look-up value by identifying that the second value is one of the flagged first names or last names; and   directing, by the control system according to the second routing policy, the online transaction to the resolving state including at least one of blocking the online transaction or initiating at least one further authentication process to be performed through the computing device.   
     
     
         9 . The method of  claim 1 , further comprising:
 obtaining, by the control system, responsive to identifying the second value corresponding to a value for a phone number field, a list of flagged phone number digits as the second look-up value;   determining the presence of the match between the second value and the second look-up value by identifying that a number of digits of the second value matches one of the flagged phone number digits; and   directing, by the control system according to the second routing policy, the online transaction to the resolving state including at least one of blocking the online transaction or initiating at least one further authentication process to be performed through the computing device.   
     
     
         10 . The method of  claim 1 , further comprising:
 according to the first routing policy, allowing, by the control system responsive to detecting an absence of the match between the first value and the first look-up value, the online transaction to proceed to the second state; and   according to the second routing policy, directing, by the control system responsive to detecting the presence of the match between the second value and the second look-up value, the online transaction to the resolving state including at least one of blocking the online transaction or initiating at least one further authentication process to be performed through the computing device.   
     
     
         11 . A system to detect fraudulent purchases, comprising:
 a control system comprising one or more processors and memory, the control system configured to:   detect an online transaction initiated by a computing device;   determine, responsive to identifying that the online transaction is in a first state, a first value corresponding to information of the computing device;   obtain, responsive to identifying that the online transaction is in the first state, a first look-up value corresponding to the first value;   select a first routing policy based on comparing the first value with the first look-up value;   determine, responsive to identifying that the online transaction is in a second state, a second value from a field of the online transaction;   obtain, responsive to identifying that the online transaction is in the second state, a corresponding second look-up value corresponding to the second value;   select a second routing policy based on comparing the second value with the second look-up value;   determine to interrupt the online transaction based on detecting a presence of a match between at least one of the first value and the first look-up value or the second value and the second look-up value; and   interrupt, responsive to the determination, the online transaction to direct the online transaction to a resolving state according to either the first routing policy or the second routing policy.   
     
     
         12 . The system of  claim 11 , wherein the control system is further configured to:
 intercept network traffic originated from the computing device to identify the first value corresponding to the information of the computing device.   
     
     
         13 . The system of  claim 11 , wherein the information of the computing device comprises an IP address of the computing device that initiated the online transaction. 
     
     
         14 . The system of  claim 11 , wherein the control system is further configured to:
 determine a geographic location of the computing device as the first value according to the information of the computing device;   obtain a list of flagged geographic locations as the first look-up value;   determine the presence of the match between the first value and the first look-up value by identifying that the geographic location of the computing device is located in one of the flagged geographic locations; and   direct, according to the first routing policy, the online transaction to the resolving state including at least one of blocking the online transaction or initiating at least one further authentication process to be performed through the computing device.   
     
     
         15 . The system of  claim 11 , wherein the control system is further configured to:
 determine, according to the information of the computing device, a connection type through which the computing device initiated the online transaction as the first value;   obtain a list of flagged connection types as of the first look-up value;   determine the presence of the match between the first value and the first look-up value by identifying that the connection type is among the list of flagged connection types; and   direct, according to the first routing policy, the online transaction to the resolving state including at least one of blocking the online transaction or initiating at least one further authentication process to be performed through the computing device.   
     
     
         16 . The system of  claim 11 , wherein the field of the online transaction comprises at least one of: a first name field, a last name field, an organization name field, a domain name field, and a phone number field. 
     
     
         17 . The system of  claim 11 , wherein the control system is further configured to:
 obtain, responsive to identifying the second value corresponding to a value for at least one of a first name field or a last name field, a list of flagged first names or last names as the second look-up value;   determine the presence of the match between the second value and the second look-up value by identifying that the second value is one of the flagged first names or last names; and   direct, according to the second routing policy, the online transaction to the resolving state including at least one of blocking the online transaction or initiating at least one further authentication process to be performed through the computing device.   
     
     
         18 . The system of  claim 11 , wherein the control system is further configured to:
 obtain, responsive to identifying the second value corresponding to a value for an organization name field, a list of flagged first names or last names as the second look-up value;   determine the presence of the match between the second value and the second look-up value by identifying that the second value is one of the flagged first names or last names; and   direct, according to the second routing policy, the online transaction to the resolving state including at least one of blocking the online transaction or initiating at least one further authentication process to be performed through the computing device.   
     
     
         19 . The system of  claim 11 , wherein the control system is further configured to:
 obtain, responsive to identifying the second value corresponding to a value for a phone number field, a list of flagged phone number digits as the second look-up value;   determine the presence of the match between the second value and the second look-up value by identifying that a number of digits of the second value matches one of the flagged phone number digits; and   direct, according to the second routing policy, the online transaction to the resolving state including at least one of blocking the online transaction or initiating at least one further authentication process to be performed through the computing device.   
     
     
         20 . The system of  claim 11 , wherein the control system is further configured to:
 allow, responsive to detecting an absence of the match between the first value and the first look-up value, the online transaction to proceed to the second state according to the first routing policy; and   direct, by the control system responsive to detecting the presence of the match between the second value and the second look-up value, the online transaction to the resolving state according to the second routing policy, the resolving state including at least one of blocking the online transaction or initiating at least one further authentication process to be performed through the computing device.